Does anyone know if you can setup "HomeCare" to deny connection for a device that has not been set a profile?  Or maybe have it go to a default profile (limited)?

I ordered Eero6 because of its parental controls, but they can easily be negated by rolling a MAC address, which both IOS and Android now do.  It is understood they have to turn that feature off inorder to be connected.  Or maybe even just hinder the "unknown" device greatly (bandwith limit or other way). 

It's a simple request, but finding hardware that enforces has been a show stopper. 

I want to filter, do not allow them to connect\use unless they are being filtered to the desired level the parent has enforced.

Thoughts?